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[57] ABSTRACT 

A system comprises an electronic ticket vending and refund- 
ing device retained by a ticket publisher, a terminal device 
having a data input device, a data display device, and a data 
transmission and reception device, etc. which are operated 
by a purchaser, and en electronic ticket storage device 
retained by the purchaser, and the vending and refunding 
device and the terminal device are connected by a commu- 
nication line such as a telephone line, and the storage device 
and the terminal device can be connected in contact or 
non-contact and transmission and reception of data between 
the vending and refunding device and the storage device are 
executed by electronic money and an electronic ticket which 
are electronically signed, and a trouble of sending and 
receiving of an electronic ticket and electronic money is 
prevented by recording the transaction history as required. 

18 Claims, 12 Drawing Sheets 
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ELECTRONIC TICKET VENDING SYSTEM purses storing electronic money, by using the only com- 

AND METHOD THEREOF mon global secret key in one electronic money system 

as a means for judging whether the opposite of com- 

« . /..r^^r^tr. ™ ~™ — ™ munication belongs to the same electronic money sys- 

BACKGROUND OF THE INVENTION 5 tan as that of oneself or not a local secret key uid by 

1 .FIELD OF THE INVENTION each electronic purse when money is sent between 

The present invention relates to an electronic ticket vend- electronic purses is signed electronically. All electronic 

ing system or an electronic ticket vending/refunding system purses belonging to the aforementioned electronic 

and a method thereof using electronic information P 01 ** system have a global public key corresponding to 

(hereinafter called electronic money or electronic cash) 10 ^ aforementioned global secret key, so that by using 

having the value of money for purchasing commodities. the global public key, the encryption method can judge 

receiving services, or cashing a check or electronic infor- whether the opposite of communication belongs to the 

matioo (electronic ticket) on train tickets or conceit admis- same electronic money system as that of oneself or not 

sioo tickets which are generally called tickets. There is a so-called prepaid card for purchasing by 

2.DESCRIFnON OF THE PRIOR ART 13 prepaying the cost as electronic money. A prepaid card 

Conventionally, to purchase a train ticket ox a concert *** not ^J^™ ^J?***? ^ 

ticket, it is generally necessary to go to a counter for vending ° H bje ^J° (coir^odiUes or 

tickets. THe reason is that a ticket is a jointed paper and it £ f c ™? e * ) ** d information to be stored is 

necessary to pay the cost of the ticket Son^ticW may be ^ ° f ^^ntto the selling pnee. 

purchased by^lephone, though it is necessary to mail the 20 ^^L?^ «?" ***** <? 

ticket Inthii f caselacredit embank transf ertmail transfer, refund a purchased objectit is different from electronic 

or cash registration is used so «^ money which ^oos like money. 

However, kthe case of bank transfe inail transfer, or cash "^f^ Z ^ attemirted to apply an electronic ^money 

rcgis^uon.hisr^ssarytogotoabankorapost office. „ ^^'"T!^ 

„ ' ^ , *~ 25 art to an electronic ticket vending and purchasing system 

Recently, as anew settling means, for exairmle^ere is a usm a blic ^ ^ as tdephooe, mereis only one kind 

method using eleenrome data (hereinafter referred to as ofcommon global secret key ^d it is not signed electronic 

electtonic money having me value of money which is ^ on me electronic money itself, so thaTthe problems 

disclosed in Published Unexamined Patent Application described hereunder are imposed. 

(Based on International Application) 5-504643. In this con- „ ^ a plurality ^ udatl publication sources (for 

vcnuonalexampk. a means for storing electronic money a corporatioit airplane company, event 

^creiiiatferailled an electronic purse), a means for trans- ^ sharc elwJ ^ c tick 7s^tem, in 

ferrmgetectromc money between a host coir*utcr of a bank othcr words . whcD dcctronic dckets by different 

and an electronic purse, a means for transferring electronic ^ ^hcrs are stored and used in one kind of etec- 

ir^ between two electromc pulses, and a means for 35 tronic ticket storage device at me «ime time or one after 

preventmg f^ery or illegal reproduction of dectronic another, a ticket publisher may forge or reproduce illegally 

money ^ are described^ In tms example as a means for a ticket ^ another tkkel publisher by usinTmi 

preventmg fecgeryand illegal reproduction of electronic I/O interface, command interface, or encryption mechanism 

mon^ an asymmetcic encryption afeccithni reputed by ^ ^ dcctroflic ^ borage device. Therefore, when the 

J* Sr^imer Adleman) ^gonthm and a sym- ^ ^ ^ device is shared a means for 

forgery ^ m ^al ruction of a ticket by 

Encryption Standard) are used. another ticket publisher is necessary. There is an JC card 

By using an electronic money system having these (also called a smart card) as a typical example of the 

encryption arts, electronic money can be transferred safely electronic ticket storage device. 

between two electronic purses connected by a telephone 45 Furthermore, when ticket information stored in the dec- 
line. The encryption arts used in this conventional example ironic ticket storage device is encrypted, to confirm the 
can be applied also to transfer of dectronic ticket informa- ticket information stored in the dectronic ticket storage 
tion by a public line such as telephone. Namely, when an device by a ticket purchaser, a terminal device having a 
dectronic ticket having electronic ticket information printed decryption means is necessary. However, in consideration of 
on a paper, the aforementioned dectronic money as a means 30 convenience, it is desirable that a portable terniinal device 
far paying the ticket cost an d a physical storage medium on the market can be used. 

such as an JC card storing them are used, by using a ^ OT a h a received by telephone, 

conmmnicarion means such as telephone, a ticket can be a purchaser and « ticket vender are located away from 

purchased without going to a ticket vending win dow. a bank. each other, so that a trouble may be caused mat cash or a 

crapes office. In the san» way, reto 35 ticket is stolen off or cash or a ticket is not given or received 

due to cancel of the ticket can be executed by using a actually. For example, when a ticket purchaser makes a 

comniunication means such as telephone. for ^ te receives no ticket after he purchases a ticket 

An electronic ticket storing just electronic ticket informa- and pays dectronic money as a cost of the ticket, the ticket 

tion may be easily forged or reproduced illegally. By using purchaser may tell the truth or make a false statement Even 

encryption by an asymmetric algorithm equivalent to the 60 when a ticket purchaser makes a claim for that no electronic 

means for preventing forgery and illegal reproduction of money is sent to him after he transfers his ticket to the ticket 

dectronic money which is used in the method disclosed in vender so as to refund the ticket the same is caused. 

Published Unexamined Patent Application 5-504643 men- Furthermore, it is assumed that to refund the ticket cost 

tioned above, illegality can be prevented to a certain extent a ticket purchaser sends an electronic ticket to a ticket 

In the encryption method in the aforementioned conven- 63 vender first and the ticket vender checks the validity of the 

tionai example, when electronic money is sent between ticket and then sends the ticket cost to the ticket purchaser 

dectronic by electronic money. When an dectronic ticket is to be sent 
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if a copy of the electronic ticket is sent to the ticket vender 
without deleting the electronic ticket and the electronic 
ticket storage device (IC card) is pulled out forcibly from the 
terminal device at the same time mat the ticket cost is sent 
from the ticket vender, a problem arises that the valid ticket 
and the refunding cost of the ticket exist on the ticket 
purchaser side at the same time. On the other hand, when an 
electronic ticket is deleted from the electronic ticket storage 
device so as to send the electronic ticket if a communication 
failure occurs before the ticket refund reaches the ticket 
purchaser after the electronic ticket is sent a status that the 
ticket purchaser loses the ticket and cannot receive the 
refund occurs. Since the ticket is deleted, even if the ticket 
purchaser attempts to make a claim for the ticket vender, a 
problem arises that mere is no physical evidence. 

SUMMARY OF THE INVENTION 

An object of the present invention is to solve these 
problems and to provide an electronic ticket vending and 
refunding system and a method thereof for working when a 
plurality of ticket venders share only one electronic ticket 
vending and refunding system in a system for purchasing or 
refunding a ticket from a distant place using a telephone line 
for preventing forgery or illegal reproduction of an elec- 
tronic ticket by a ticket purchaser and allowing a ticket 
purchaser to confirm the content of an electronic ticket even 
by a terminal device having no means for decrypting ticket 
information stored in the electronic ticket storage device. 

Another object of the present invention is to provide an 
electronic ticket vending and refunding system and a vend- 
ing and refunding method thereof for working when a 
transaction using electronic money and an electronic ticket 
is executed via a telephone line for preventing a trouble on 
whether the electronic money and the electronic ticket are 
given or received actually. 

Still another object of the present invention is to provide 
an electronic ticket vending and refunding system and a 
vending and refunding method thereof for preventing a 
ticket purchaser from retaining both a valid ticket and a 
refund at the same time so as to refund the ticket cost and 
proving that the ticket purchaser retains the ticket when he 
cannot receive the refund. 

To accomplish these objects, the dectronic ticket vending 
system or vending and refunding system and the method 
thereof of the present invention comprise a vending device 
for generating an dectronic ticket and executing at least one 
of vending and refunding by exchanging the generated 
electronic ticket with electronic money and a communica- 
tion line connected to it and furthermore comprise at least 
one terminal device connected to the aforementioned, com- 
munication Kne for renting input, output, and transmis- 
sion and reception so as to execute at least one of vending 
and refunding of an dectronic ticket and an electronic ticket 
storage device having a function for electronically connect- 
ing the aforementioned terminal device for storing electronic 
money and a purchased electronic ticket wherein by a 
request of at least one of rjurchasing and refunding of an 
dectronic ticket by at least one of the aforementioned 
rnrmrml device and electronic ticket storage device, at least 
one of the electronic ticket and the electronic money is sent 
from the aforementioned electronic ticket vending device 
via the aforementioned communication line. 

More concretely, me electronic ticket vending and refund- 
ing system of the present invention is a ticket vending and 
refunding system using electronic money and an electronic 
ticket and comprises an electronic ticket vending and 
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refunding device for producing an electronic ticket and 
vending or refunding the produced dectronic ticket by 
dectronic money, a terminal device for executing at least 
input display, and transmission and reception of dectronic 
3 ticket vending and refunding data, and an electronic ticket 
storage device for storing an dectronic ticket purchased by 
electronic money, wherein the aforementioned electronic 
ticket vending and refunding device is connected to the 
aforementioned terminal device by a communication line 
10 such as a telephone line and the aforementioned dectronic 
ticket storage device is connected to the terminal device in 
contact or non-contact 

In the aforementioned dectronic ticket vending and 
refunding system, it is desirable that the aforementioned 
15 electronic ticket vending and refunding device comprises at 
least a ticket production means for producing a ticket a 
ticket transmission and reception means fox transmitting or 
receiving an dectronic ticket a money transmission and 
reception means for transmitting or receiving electronic 
20 money, a money storage means for storing electronic money, 
a transaction history storage means for storing a transaction 
history, and an encryption key storage means for storing an 
encryption key. 
It is desirable that the aforementioned ticket production 
25 means comprises at least a microcomputer for producing an 
electronic ticket from data indicating a ticket publication 
source and data indicating the price of a ticket 

To prevent another ticket publisher from publishing a 
ticket which is forged or illegally reproduced even if a 
plurality of ticket publishers share a single electronic ticket 
system, the aforementioned dectronic ticket vending and 
refunding device can allocate a different secret key of 
asymmetric encryption algorithm and a different public key 
which forms a counterpart to the secret key to each ticket 
publisher and store mem in the aforementioned encryption 
key storage device. 

furthermore, it is desirable that the electronic ticket 
storage device comprises at least an electronic ticket storage 
4Q means and an electronic money storage means for storing an 
dectronic ticket and dectronic money respectively, a trans- 
action history storage means, an I/O interface with the 
outside, and a microprocessor which is set so as to control 
transmission and r ec eptio n of an dectronic ticket and dec- 
43 tronic money and storage the history thereof. 

Furthermore, it is desirable (hat to allow even a terminal 
device having no decryption mechanism to confirm the 
content of an electronic ticket stored in the dectronic ticket 
storage device, the dectronic ticket storage device com- 
so prises a means far storing unencrypted ticket data and a 
means for storing an dectronic signature which is produced 
by encrypting the whole or a part of the aforementioned 
ticket data by me secret key of the asynraictrk algorithm and 
the microprocessor can operate so as to return die afore- 
55 mentioned unencrypted ticket urformation to a first com- 
mand obtained via the aforementioned physical interface 
with the outside as a response to the first command and to 
check the validity of a second cornmand for the second 
command and return the aforementioned ticket information 
tio and aforementioned electronic signature as a response to the 
second command when it judges that the second command 
is valid. 

As an alternative means therefor, it is possible that the 
aforementioned electronic ticket storage means comprises a 
65 means for storing ticket uiformation which is encrypted by 
the secret key of the asyrrunetric encryption algorithm and a 
rn^flng for storing a public key which forms a counterpart to 
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the secret key which encrypts the ticket information and the vending and refunding device receives a refunding request 

microprocessor is set so as to return the result which is ' from the terminal device via the communication line, the 

obtained by decrypting the aforementioned encrypted ticket device requests sending of the electronic ticket which is 

information by the public key to a first command obtained requested to refund to the electronic ticket storage device 

via the aforementioned physical Interface with the outside as 5 connected to the terminal device, receives the electronic 

a response to the first command and to check the validity of ticket from the electronic ticket storage device via the 

a second command for the second command and return the communication line, then confirms the validity of the dec- 

aforementioned encrypted ticket information as a response tronic ticket, sends electronic money of the ticket refund to 

to the second command when it judges that the second the terminal device via the communication line when it 

command is valid. 10 judges that the electronic ticket is valid, and refunds the 

Furthermore, as a means for judging the validity of an electronic ticket by transferring the electronic money to the 

electronic ticket it is possible that the aforementioned electronic ticket storage device from the terminal device 

microprocessor of the electronic ticket storage device is set which receives the electronic money, 

so as to return a response to a third command and an Furthermore, it is desirable that when an electronic ticket 

electronic signature obtained via the physical interface with 15 is vended by the aforementioned electronic ticket vending 

the outside on whether there exists an electronic signature and refunding method, the electronic ticket vending and 

conforming to the aforementioned electronic signature in the refunding device executes a step of receiving electronic 

electronic ticket storage means. money from the electronic ticket storage device, a step of 

To prevent an VO history of an electronic ticket and storing that the device receives the electronic money from 

electronic money from alteration, it is desirable that the 20 mc electronic ticket storage device, a step of sending the 

aforementioned nncroprocessor of the electronic ticket star- electronic ticket to the electronic ticket storage device, and 

age device is set so that an item relating to the afaremen- 3 step of storing that the device sends the electronic ticket to 

tioned electronic ticket cannot be deleted from the transac- the electronic ticket storage device. Furthermore, to refund 

tion history storage means until the electronic ticket stored the aforementioned purchased electronic ticket, it is possible 

in the dectronic ticket storage means is deleted. 25 that & c electronic ticket vending and refunding device 

Furthennore. to prevent bom the ticket to be refunded and a st fP <* the electronic ticket from the 

the refund from existing in the electronic ticket storage ? cctromc * ckrt dew ^ a step of storing that the 

device at the same time by pulling out the electronic ticket dcvicc rcccivcs thc dcctromc Ucket from mc electronic 

storage device forcibly from the terminal device for ^ ticket storage device, a step of sending the aforementioned 

refunding, it is possible that the aforementioned micropro- 30 electronic money to the dectronic ucket storage device, and 

cessor of the electronic ticket storage device is set so as to as £P°f stonn * mat dcvicc me electronic money 

delete the electronic ticket to be refunded which is stored in to the electronic Ucket storage device, 

the electronic ticket storage area of the electronic ticket Furthermore, it is desirable that when an electronic ticket 

storage means when electronic money is stored in the is vended mc aforementioned electronic ticket vending 

aforementioned electronic money storage means so as to 35 ^ refunding method, the electronic ticket storage device 

refund the ticket executes a step of sending electronic money to the electronic 

As an alternative means therefor, it is possible that the TfZ^^ *f*M* a f storing that 

aforementioned electronic ticket storage means of the eke- the device sends Ae electronic money to the electronic ticket 

tronic ticket storage device has an area for storing an invalid „ "? Z ^^^t ^1 *5 

flag and the aforemcationed microprocessor of the electronic <^*™ c ^ mc decfronic ucket vending and 

ticket storage device makes the aforr^tiorKd invalid flag ^randrng device, and a step of storing that the device 

corresponding to the d to dec^ ticket the dcctromc ticket 

for refunding of the ticket and then transfers the electronic vending and refunding device. 

ticket to the electronic ticket vending and refunding device. 45 Furthermore, to refund the aforementioned purchased 

and deletes the electronic ticket stored in the electronic electronic ticket it is desirable that the electronic ticket 

ticket storage area of the electronic ticket storage means stora 8 e device executes a step of sending the electronic 

after completion of transfer ticket to the electronic ticket vending and refunding device. 

The electroiuc ticket vending andrefundiiig method of the i^^^J^? ^^J^ * C el "?° nictickct ^ 

present invention is an dechoL ticket^tnmng and refund- 50 * C dectronic ticketvending and rending &nce. a step of 

ing method for allowing ticket vending or^efunding to a re ^! Vmg *f f*?™ ^ thejlectromc ticket 

d^ place osingTdectr^ v^a^rcfun^^ 

™a • ^mmmul.-/ m 1™ ^ — f* device receives the electronic money from the electronic 

anda c^imm^mhnc wherein to vend an efectromc ^ . refunding device 

ticket when the electronic ticket vending and refunding 65 «cvi«=. 

device recdves a ticket vending request from a terminal 55 The ^ esM mvcntion ^ving aforementioned consti- 

device via the communication tine, me device sends the tution me function and operation indicated below, 

target ticket and a cost sending request merefor to the The operations of the electronic ticket vending and 

terminal device via the communication line, receives dec- refunding system and the vending and refunding method 

tron money of the target ticket cost from the eJectronic ticket thereof of the present invention will be explained hereunder 

storage device connected to the terminal device via the 60 far (1) a case of purchasing a ticket (2) a case of confirming 

communication line, men produces an electronic ticket the content of a ticket and (3) a case of refunding a ticket 

which is requested to vend, sends the electronic ticket to the (1) Case of purchasing a ticket 

terminal device via the communication terminal, vends the When a ticket purchaser purchases a ticket, he operates a 

dectronic ticket by transferring the electronic ticket to the terminal device connected to a communication line such as 

dectronic ticket storage device by the terminal device which 65 a telephone line and calls out an electronic ticket vending 

receives the electronic ticket and to refund the aforemen- and refunding device, that is. a computer of a ticket pub- 

tioned purchased electronic ticket when the electronic ticket Usher (or a ticket vender). The electronic ticket vending and 
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refunding device sends a menu of tickets which can be sold In the former case, the electronic ticket vending and refund- 
to the terminal device via the communication line. The ing device sends the unencrypted ticket information data and 
terminal device receives the menu and displays it on the the electronic signature to the terminal device and in the 
display means. When the ticket purchaser selects the ticket fatter case, it sends the ticket information data in which all 
to be purchased using the input means of the terminal device 3 the statements are encrypted and the public key which forms 
and then inputs necessary conditions such as the number of a counterpart to the secret key to the terminal device, 
tickets, these data are sent to the electronic ticket vending For ^ electronic ticket having one of the aforementioned 
and refunding device via the communication line. ^ smicturcs< the terminal device transfers the received 

The electronic ticket vending and refunding device checks ( j ala ^ me electronic ticket storage device and the electronic 
whether the ticket can be vended. When the ticket can be l0 storage device stores the received data in the elec- 
vended. the device calculates the ticket cost and sends a tronic ticfcet storage means. When the data is stored in the 
sending request command to the terminal device. According electronic ticket storage means, the electronic ticket storage 
to this request, the terminal device instructs the ticket device records in the transaction history storage means that 
purchaser to insert the electronic ticket storage device into mc electronic ticket is received. 

the terminal device. In this case, a contact or non-contact l5 M$0 ^ to transmission or reception of an electronic 
type IC card may be used for the electronic ticket storage tickct m mc samc way ^ transmission or reception of 
device. When a non-contact type IC card is used, electro- electronic money, by using the communication procedure 
magnetic waves such as infrared light or radio waves or described in Published Unexamined Patent Application 
ultrasonic waves are used for communication, so that mere 5504543 mentioned above, forgery or illegal reproduction of 
is no need to insert the IC card Into the terrninal device and 20 an electronic ticket due to interception of the communication 
it is desirable to bring the IC card dose to the tcnninal can be prevented, 

device. When the ticket purchaser inpute a sending pennis- mc content of a ticket 

sion response from the input means of the terminal device. ifi . ^ wmu ™* m - . , , . - 
the response is sent to the electronic ticket vending and ™<*J ucto pux^s^ confix the content of fee 
refund device from the terminal device. The electronic * purchased ticket by the terminal device he inpu^a bcket 
ticketWing and refunding device receiving the response data d^lay coinmand to the terminal device. When the 
sends a sendLg commands the demonic ticket storage terininal device receives me command, it sends a command 
ot^c via me^rrninal device. To prevent forgery or Illegal for reading unencrypted data to the dectronic ticket storage 
™iuction of electronic money cue to interception of me device via the cormniinicadon Une such as a telerAonehne^ 
explication content of the^ctrc^^nTft is pos- ^ Wten the stored electronic ^^."^ 
sibie to use the sending procedure using the encryption art ticket data information and an dectrome signat^. the 
described in Published Unexamined Patent Application electronic ticket storage device returns only unencrypted 
5-504643 of the prior art When the electronic ticket storage data to the taminal device for this reading conutiand and 
fcvicTsends trJXtronic money and then receives con- when the stored electronic ticket contuses data in which all 
firmation of reception of the electronic money from the M mc sUteir^nts are encry^ ^ 1^^^^^' 
dectronic tictevending and refunding device, the dec- ticket storage device returns the result which is obtained by 
SScLt s^orageSe records theri) of the opposite of decrypting the ticket oata in which all the statements are 
^mgSeS). sent money, and completion^Lg encrypted by me public key to theterminal device. The 
Zteto history ofelectronktickets andetectronic money. terminal device displays fee received unencrypted ticket 
that is. the transaction history. 40 tarnation data on the .display unit of the terminal device. 

Next when the electronic ticket storage device sends As mentioned above, the terminal device basically pro- 
completion of recording and the electronic ticket vending vides an interface between a ticto purchaser, the e^mc 
andidtai device ticket storage o^viee. aiid the elected 

ing and refuiiding device produces an electronic ticket and refunding device connected via the romrrmniratioo line. The 
then sends the dectronic ticket to the terminal device. Into 45 encryption process for an electronic ticket and ekctronic 
case, the dectronic ticket indudes ticket iiiformation such as tnoney which is executed for communicatwn with the elec- 
the ticket name, publication source, date, and transaction *onic ticket vending and refunding device can prevent 
science number and a. dectronic signature for proving the forgery and illegal rejroduction of an dectomc acto and 
vahdity of the informatioiL An dectronic signature is data in dectronic money and alteration of a transaction history by 
which the wfade era part tftk^rt 30 concealing the encryption process by aUowing the electronic 

by using the secret key of an asynmKtric encryption algo- ticket storage device to execute it As a result the transaction 
rimmwhichhaUccatedtoeacht^ history can increase the proving ability for transfer of an 

As a method for extracting a part of data from the afore- electronic ticket and electronic money, 
mentioned ticket information, there is a method using the (3) Case of refunding a ticket 

hash function. As an alternative idea, a method for consti- 55 Next to refund the purchased ticket the ticket rxnehaser 
tuting an electronic ticket only by data in which the whole calls out the electronic ticket vending and refunding device 
of the ticket information is encrypted by the aforementioned from which the ticket is purchased by the terininal device via 
secret key may be used. the cornmunication line such as a telephone line and selects 

The constitution of the dectronic ticket storage means of Ticket Refunding by the service kind selection menu. The 
the electronic ticket storage device varies with the data «o terminal device reads and displays a list of electronic tickets 
structure of an electronic t icta * One is a constitution having stored in the dectronic ticket storage device. When the ticket 
an area for storing unencrypted ticket information and an purchaser sdects the ticket to be refunded, the terminal 
area for storing an dectronic signature and the other is a device sends the corresponding dectronic ticket number to 
constitution having an area for storing ticket inf carnation in the dectronic ticket vending and refunding device. The 
which all the statements are encrypted and an area for 65 electronic ticket vending and refunding device sends a 
storing a public key which forms a counterpart to the secret request command for sending the electronic ticket of the 
key which encrypts the aforementioned ticket Mormation. corresponding ticket number to the electronic ticket storage 
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device via the terminal device. When the electronic ticket ticket exists in the electronic ticket storage means, so that a 

storage device receives reception confirmation of the corre- trouble due to alteration of the transaction history can be 

sponding electronic ticket from the electronic ticket vending. prevented. When transaction histories are accumulated up to 

and refunding device after it sends the ccnrsponding elec- the storage capacity, it is desirable to delete deletabie 

tronic ticket to the electronic ticket vending and refunding 5 histories sequentially 

d^ic^tte electronic ticlcet storage device records in the mEthod for tte of m electronic 

transaction history storage area of the electronic ticket ,. . _ ° ' ~V™ "T™"* v™" 

storage device that it sends the ID of the opposite of sending ^.^."^ "J*T£* 

and fee aforementioned electronic ticket fe^g an electronic ticket to*e demonic ticket vendmg 

. . .. . ....... and refunding device from die electronic ticket storage 

U*b case, if an area for stonng an invahd flag is „ ^ ^ toe by toe deettonic ^ 

SThom *^ electromC f, S w 8e T', vending and rcftuiding device, there is a method for sending 

^ T! S ^ ^ m ^f! n ^ ld - ™ C unencrypted ticket information to the electronic ticket vend 

reason .s that rf the data of an efcetrome ticket to be sent is ^ ^ refunding ^ the electronic ticket storage 

deleted, and a comrnunicaUon faUure occurs, and hence a ^ce. producing an electronic signature from the ticket 

hcket purchaser cannot r^ve Ae^refunjL the evidence 1S xat ^ ^ ehxa ^ ic ticket veading ^ 

£ " StOT ^ f^TJ"*? " refi,ndto * device, sending the electronic signatured the 

Panted from missing and if a vaud hctej left as it is. electroni * ticiet ^age device, and judging be validity by 

astatus th^ the electronic ticket storage device is discon- the electronic ticket storage device. To IS the method, it 

*T ** to ^'f cw 1 « a » *e same time is a^,. to ^ for ^^g for me identity 

ttut the ticket purchaser receives the electronic money and M of ^ de,^ signature sent to the electronic ticket 

both the valid ticket and the refund are reined is prevented stora ge device with the electronic signature retained by the 

from occurrence. However, the aforementioned invalid flag electronic ticket storage device, 

may be used or may not be used. When an invalid flag is not ra _ . . , . ... . , . . , 

_ „„, „„ J^. , r „ . „ „„ . . , . ,7l_j If a gate device having a public key which forms a 

d^nTc *gZtt p3T E'SSStfi » counterpart to ehe secret ^ y us £ to ^ an electronic 

storage ir^a^on^dand the ticket data is made invalid * signature is instaUed in the entrance gate of an installation 

by spring it in the saving area. Namely, it is desirable to ™™&% k «? actual^ and the e^mc^s^ge device 

store the ticket data with an electronic signature to be sent * Jf"?* mXO ™t °? ° f 

in the saving area iimnediately before starting sending of the ^ ^ tickets can be used, 

electronic ticket delete the afoxernentioned ticket data exist- 30 The foregoing and other objects, advantages, manner of 

ing in the ticket storage area, and men send the ticket data. °P eratlon novel fcatures <* * c P"* 6 * invention will be 

On the other hand, the electronic ticket vending and ^'ff 004 * e foUowmg detailed description when 

refunding device receiving the electronic ticket recorfs in to CODDeCtiori Wlth ^Wying drawings, 

the transaction history storage means of the electronic ticket BRIEF DESCRIPTION OF THE DRAWINGS 

vending and refunding device that it receives the electronic 35 FIG. 1 is an overall block diagram showing an embodi- 

ticket Next the electronic ticket vending and refunding ment of the electronic ticket vending and reminding system 

device confirms the validity of the sent electronic ticket of mc present invention. 

^^^^.^ fonn * a ^fJ** ******* FIG. 2 is a block diagram showing the rough constitution 

teyjamich J^*<fy sn^ebeket retainedby die ofihccicctronic ticket vending andlfunding device shown 

electronic ticket vending and refunding device. When the 40 m piq 1 

^!^ C ^ n ^:! nd ^ j ^ FIG. 3 is a block diagram showing en ernrx>diment of the 

the electronic ticket is valid, it calculates the refund from the , . , . . . ™~ t 

. ^ * ^ . , . . . . terminal device shown in FIO. L 

ticket cost and the ticket refunding commission art sends ___ . . ^ , . . 

dectrcoic money eqiial to the refmxln^ , K ^1^? C <Uag T n 5 b °^ n8 ^ ° f 

If this occur*, the electronic ticket vending and refunding 45 electronic ticket storage device shown in FKj. 1. 

device records sending of the electronic money and the FIO \ 5 * a flow chart sbowin 8 ^ embaiiment of the 

amount thereof in the transaction history storage means of processing procedure for purchasing an electronic ticket 

the electronic ticket vending and refunding device. usin « ^ electronic ticket vending and icfuixiing system 

When the electronic storage device receives the electronic shown in FIG. 1. 

money sent from the electronic ticket vending arid refunding 30 FIG * 6 I s ^ iUustration . showin 8 operation screen 

device via the terminal device, it acanntilates the sent examples displayed on the display device of the terminal 

electronic money to the amount of money stored in the device shown in FIG. 3 according to the processing proce- 

dectronic ticket storage means and records reception of the dure fox piirchasing an dectronic ticket 

dectronic money and the amount thereof in the transaction FIG. 7 is a data configuration diagram showing a content 

history of the electronic ticket storage device and then 55 e * am P le of a transaction history file in the dectronic ticket 

ddetes the electronic ticket to be refunded. If there is an area vending and refunding device shown in FK}. 2 when an 

for storing an invalid flag in the electronic tkket storage area electronic ticket is purchased. 

in this case, the dectronic storage device tarns the urvalid FIG. 8 is a data configuration diagram showing a content 

flag OFF. Furthermore, the electronic ticket storage device example of a transaction history storage area in the elec- 

puts the item in the VO history relating to the deleted 60 ticket storage device shown in FIG. 4 when an 

dectronic ticket into the deletabie state. As a method electronic ticket is purchased. 

thereof, there is a method for providing a ddetable flag for FIG. 9 is a data configuration diagram showing a content 

each item in the transaction history and rurning the deletabk example of a ticket information file of the electronic ticket 

flag ON when it becomes deletabie. The invalid flag is vending and refunding device shown in FIG. X 

turned OFF when the item in the transaction history corre- 65 FIG. 10 is a data configuration diagram showing an 

sponding to the ddetable flag is deleted. By doing this, the example of the constitution of an dectronic ticket storage 

transaction history cannot be deleted while an dectronic area in the electronic ticket storage device shown in FIG. 4. 
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FIG. 11 Is • data configuration diagram showing another ticket vending and refunding device 1 comprises a storage 

example of the constitution of an electronic ticket storage device 11. a display device 18 and an input device 19 which 

area in the electronic ticket storage device shown in PIG. 4. are used to confirm the vending condition of tickets and add 

FIG. 12 is a flow chart showing an embodiment of the new ticket information, a cornmunication device 20 for 

processing procedure for refunding an electronic ticket using 5 communicating with die electronic ticket storage devices 2 

titt electronic ticket vending and refunding system of the ^8* commurdc^on toe such as^ep^ h«^ a 

cat invention, microprocessor (CPU) 21. Furthermore, to this electronic 

_ . . . . ticket vending and refunding device 1. a large capacity 

*S U , l& , f?tt J^JSS ■»* devid (not shown Ac drawing) such as a hard- 

examples dispUyed^ 01 > thcdUplay device of the terminal ^ warc ^ sk wfcdi stores a ticket information file 16 for storing 

device shown in FIG. 3 according tome processing pcoce- infoffmation ^ whethcr tickcts ^ ^ vended and the ticket 

dure for refunding an electronic Octet ^ ^ Q fifc n for recording a history 

FIG. 14 is a data configuration diagram showing a content whcn electronic money and an electronic ticket are trans- 
example of a transaction history file in the electronic ticket muted to or received from the electronic ticket storage 
vending and refunding device shown in FIG. 2 when an 15 devices 2 is connected via a bus line 10. When the electronic 
electronic ticket is refunded. ticket vending and refunding device 1 has a built-in large 

FIG. 15 is a data configuration diagram showing a content capacity storage device, it is desirable to store the ticket 

example of a transaction history storage area in the elec- information file 16 and the transaction history file 17 in it 

tronic ticket storage device shown in Fig. 4 when an As shown in FIG. 2, the storage device 11 comprises an 

electronic ticket is refunded. 20 electronic money storage area 12. an area 13 for storing an 

FIG. 16 is a block diagram showing another embc«iiinent encryption key used to sign ticket information data 

of a terminal device used in the electronic ticket vending and electronically, an area 14 for storing a program, and a 

refunding system of the present invention. working area 15. The CPU 21 controls the aforementioned 

FIG. 17 is an illustration showing operation screen devices 11 to 20 coiistitu^te elecfronic ticket vending 

examples displayed when the information stored in the 25 and refunding device 1 according to the program storedin 

d^ctronic Octet storage device shown in FIG. 4 is con- the program storage area of the storage device 11. The 

~ , communication method of the communication device im 

nrmeu. . . «. . 

may be wire communication or radio communication. 

DETAILED DESCRIPTIONS OF THE Next, the constitution of the terminal device 3 is shown in 

PREFERRED EMBODIMENTS 30 FIG. 3. The terminal device 3 comprises an input device 22 

An einbodirneiit of the electronic ticket vending and inputting data, a display device 23 for displaying date, a 

refunding system and the vending and refunding method commumcation device 24 for co^mcating with the elec 
thereof of the present invention will be explained in detail *ornc hcket vending and redoing device 1 using a com- 
hcrcundcr by referring to the accompanying drawings. ^ municauon line such as a telephone line^ a storage device 25 
J . . * .\T J * . ^ 35 an IC card reader/writer (hereinafter abbreviated to IC card 

FIG. 1 is a Wcxi diagr^ showmg^ whc4e^st l tution ^ M fcTc^nZicaung with an IC card 30 comprising 
of the electron* ticket vendmgrt icfimdug systemof Ae £ ^ storage device 2 formed on thelcchip 

present in ventem. Reference code 1 md^s a. electomc conning the aforementioned devices^ 

ticket vending and refunding device retained by a ticket ^ 
publisher and a plurality of electronic ticket vending and . 
refusing devices 1 are connected to a telephone line 4 40 FIG. 4 shows the consbtnbon of the electronic ticket 
respectively. A plurality of terminal devices 3 having a storage device X The electronic ticket storage device 2 
rrXn^ine interface which are used and operated when a formed on the K chip comprises a storage unit 31 for stonag 
ticket |HKiuserpBid>ases«refoiios a ticket are connected » P^^^ "^^J^f^ f /"."^ 

to the telephone line 4. Electronic ticket storage devices 2 M netting the IC card R/W 26 of the terminal device 3 
retained byticket purchasers respectively are connected to physically, and a CPU 38 for processing in jaccordance with 
the terminal devices 3 by physical interfaces (not shown in «*e program stored in the storage umt 31. Furthermore, the 
the drawing) in contact or non-contact so as to execute storage unit 31 comprises an electronic ticket storage area 
two-way aStnumicaoon. 32 ' "electronic money storage area 33. a program storage 

As mentioned above, the electronic ticket vending and x «" j*J ? <™n*f*» ^acry**^ area ^storing 
refunding system of me present invention isVsystem 50 ^ M l^ S 1 ^ D J^, r ^^l^ t?* 0 ™ 
compris^ a^araKry of electronic ticket vending and "^"J ' ^S^!L»v.ie«- 

refunding devices 1 connected to the telephone line 4. a The vending and refunding mrthrxl of the electronic ticket 
plurality terminal devices 3. and aphirality of electronic vending and refunding system of the present lnveauon will 
ticket storage devices t which can be connected to the „ be explained hereunder for (1) a case of purchasing a ticket 
terminal devices 3 in contact or non-contact. As a means for newly. (2) a case of refunding a purchased ticket, and (3) a 
connectine each of the terminal devices 3 in non-contact case of confirming the content of a purchased Ucket by using 
electromagnetic waves such as radio waves or infrared light *e devices 1 to 3 having the aforementioned constitution, 
or ultrasonic waves are used and as a means for realizing the (1) Case of purchasing a ucket newly 
electronic ticket storage devices 2. an IC card (also called a w FIG. 5 is a flow chart showing the outline of the process- 
smart card) can be used. ing procedure for purchasing an electronic ticket using the 

The marc detailed constitution of each of the devices 1 to electronic ticket vending and refunding system shown in 
3 constituting the aforementioned electronic ticket vending FIG. 1 

and refunding system will be explained hereunder with To purchase an electronic ticket, a ticket purchaser calls 
reference to FIGS. 2 to 4. 65 out the electronic ticket vending and refunding device 1 of 

Firstly, the constitution of the electronic ticket vending a ticket publisher handling the ticket to be purchased by 
and refunding device 1 is shown in FIG. 2. The electronic using the terminal device 3 (Step 210). When the electronic 
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ticket vending and refunding device 1 is called out via the ritfam represented by the RSA system is used. Each dec- 

telephone line 4, it sends the initial menu via the telephone tronic purse retains a global public key Pg which is shared 

line 4 (Step 220). When the terminal device 3 receives the by all the electronic purses, a local secret key Sli which is 

initial menu, me terminal device 3 displays it on the display intrinsic to each electronic purse* a local public key Pli and 

device 23 and waits for input from the ticket purchaser. 5 Pli*Sg which is obtained by encrypting the local public key 

FIG. 6 shows operation screen examples displayed on the Pli by a global secret key Sg. A symbol * indicates encryp- 

display device 23 when a ticket is purchased. £11 FIG. 6, tion or decryption, and the preceding of the symbol * 

reference code 510 indicates an initial menu screen. When indicates data to be encrypted or decrypted, and the subse- 

thc ticket purchaser inputs "1 H indicating ticket vending quent of the symbol * indicates a key used for encryption or 

from the input device 22, the data is sent to the electronic 10 decryption. Assuming the local secret key of the electronic 

ticket vending and refunding device 1 via the telephone line purse on the sending side as Sis and the local public key 

4 (Step 230). thereof as Pis and the local secret key of the electronic purse 

When the electronic ticket vending and refunding device on the receiving side as Sir and the local public key thereof 

1 receives it the electronic ticket vending and refunding as Pir, the electronic purse on the receiving side sends 

device 1 sends a ticket menu screen 520 showing the content !5 Plr*Sg+R*Slr to the electronic purse on the sending side. A 

of the game (competitor team, match date, etc.) to the symbol R indicates a message on the receiving side includ- 

terminal device 3 via the telephone line. If the ticket ing transaction identification, transaction sequence Dumber, 

purchaser looks at the ticket menu and purchases, for and data (data of an amount of money since money is sent 

example, a ticket for the June 2nd match of teams A to B, in this example). When the electronic purse on the sending 

when "2" is inputted, the input Is informed of the electronic 20 side receives it, the electronic purse on the sending side 

ticket vending and refunding device 1 via the telephone line. acquires the local public key Ptr using the global public key 

In the same way hereinafter, when indicating reserved Pg retained by the electronic purse on the sending side and 

scat Ais inputted for a screen 530 showing seat kinds and for acquires the message R on the receiving side including 

example, 2 tickets are to be purchased for a screen 54* transaction identification, transaction sequence number, and 

showing the number of tickets. "2" is inputted. As a result 23 data of an amount of money using the local public key Plr. 

me electronic ticket vending and refunding device 1 checks The electronic purse on the sending side acquires the data of 

whether the ticket requested by the ticket purchaser can be an amount of money to be sent from the message R and 

vended and when it can be vended, the electronic ticket subtracts the amount of money from the electronic money 

vending and refunding device 1 calculates the ticket cost and stored in the storage unit of the electronic purse on the 

sends the result to the terminal device 3. The terminal device 30 sending side. Next, the electronic purse on the sending side 

3 displays the received content (the content of the purchased produces a message VR on the sending side which includes 

ticket me number of tickets, cost confirm the amount of money to be sent, the transaction 

on a screen 550 and when the ticket purchaser inputs "1". the identification, and the message R and then sends Pls*Sg+ 

terminal device 3 sends it to the electronic ticket vending VR*Sls to the electronic purse on the receiving side. The 

and refunding device 1. When the ticket cannot be vended 35 electronic purse on the receiving side acquires the local 

the electronic ticket vending and refunding device 1 sends public key Pis on the sending side using the global public 

that effect to the terminal device 3 and asks the ticket key Pg retained by itself, acquires the message VR on the 

purchaser if he will purchase another ticket When the ticket sending side using the local public key Pis. checks whether 

purchaser wants to purchase another ticket the terminal the message R sent by itself is included in the message VR. 

device 3 displays the ticket menu screen 520 showing the 40 and when it is valid, increases the electronic money stored 

game content again. In this case, the electronic ticket vend- in the storage unit of the electronic purse on the receiving 

ing and refunding device 1 may asJc the ticket purchaser the side by the amount of money included in the message VR 

screen to be displayed (Steps 240. 250). Finally, the electronic purse on the receiving side informs 

When the electronic ticket vending and refunding device the electronic purse on the sending side that the process ends 

1 receives it the device presses the terminal device 3 to 45 normally. By mis series of steps, electronic money is sent or 

insert trie electronic ticket storage device (IC card) 2 into the received between the electronic purses safely, 

terminal device 3 (screen 560> When the electronic ticket The explanation will be restarted by referring to FIGS. 5 

storage device 2 is a non-contact IC card, it is desirable to and 6 again. Assuming that the electronic purse on the 

bring the electronic ticket storage device 2 dose to the receiving side is the electronic ticket vending and refunding 

terminal device 3. When the ticket purchaser inserts the 50 device 1 and the electronic purse on the sending side is the 

dectronic ticket storage device 2 into the IC card R/W 26 of electronic ticket storage device 2. a ticket cost of 7400 yen 

the terminal device 3. the »rrn" M * device 3 informs the can be sent to the electronic ticket vending and refunding 

dectronic ticket vending and refunding device 1 mat the device 1 from the electronic ticket storage device 2 safely 

dectronic ticket storage device 2 is inserted. The electronic according to the ending procedure of the aforementioned 

ticket vending and refunding device 1 sends a request 55 conventional example. The electronic ticket storage device 2 

command for sending a ticket cost of 7400 yen to the receives data sent from the electronic ticket vending and 

dectronic ticket storage device 2 via the terminal device 3 refunding device 1 from the extcmai VO interface 37 via the 

(Step 2*0). When the r*c<essing procedure fixim Step 260 to IC card R/W of the terminal device 3 (Step 270). decrypts 

Step 470 is in execution hereafter, the display device 23 of the sent data, subtracts the sent request amount of money 

the terminal device 3 displays Under Recessing" like a 60 from the amount of dectronic money in the electronic 

screen 570 shown in FIG. 6. money storage area 33, encrypts the amount of money, and 

Id this case, as an encryption method for sending dec- then sends it to the dectronic ticket vending and refunding 

tronic money, the method used for sending between dec- device 1 (Step 280). 

tronic purses which is disclosed in Published Unexamined When the electronic ticket vending and refunding device 

Patent Application 5-504643 described in the conventional 63 1 receives the dectronic money of 7400 yen from the 

example is used. This method will be explained briefly electronic ticket storage device 2 (Step 300). it checks for 

hereunder. In the method, an asymmetric encryption algo- the validity of the received dectronic money, accumulates 
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7400 yen in the electronic ticket storage area 12 (Step 310). To judge the validity of an electronic ticket when &c 

and registers, for example. "Transaction No. 345123. 7400 electronic ticket has the constitution shown in Ha 16. it is 

yen is received" in the transaction history file 17 (Step 320). desirable to compare data in which the electronic signature 

FIG. 7 shows an example of the content of the transaction is decrypted by using the public key FTk and the ticket 

history file 17 of the electronic ticket vending and refunding 3 information data 610 so as to check for identification, lb 

device 1. Transaction history data 650 of the transaction produce an electronic signature using a part of the ticket 

history file 17 comprises "transaction W data indicating the information data 610, it is desirable to compare data in 

transaction sequence number, "object" data indicating which the electronic signature is decrypted by the public key 

money or a ticket "sent/received m data indicating whether FTk and data which is obtained by extracting a part of the 

an object is sent or received, "content* data indicating me 10 ticket information data 610 by using the same hash function 

amount of money or the content of a the transaction history as that used when the electronic signature is produced so as 

can be deleted or not to check for identification. 

Next the electronic ticket vending and refunding device When an electronic ticket has the constitution shown in 
1 sends a notification of acknowledgment of reception of FIG. 11, the electronic ticket is decrypted by using a public 
electronic money (Step 330). When the CPU 38 of the 15 key FTk which forms a counterpart to a secret key STk 
electronic ticket storage device 2 receives the notification of retained by a device for deciding the validity and the validity 
reception of electronic money from the electronic ticket is judged depending on whether the resultant data can be 
vending and refunding device 1 via the terminal device 3 interpreted by the electronic ticket vending and refunding 
(Step 340), the CPU 38 registers "7400 yen is sent for device 1 or not As to whether interpretable or not when the 
professional baseball A* in the transaction history storage ^ data decrypted by the electronic ticket vending and refund- 
area 35. Professional baseball A is ID of the electronic ticket ing device 1 is removed in the predetermined format and the 
vending and refunding device 1 (Step 350). FIG. 8 shows the data removed by the electronic ticket vending and refunding 
content of the transaction history storage area 35. Transac- device 1 is collated with the data which i s reta ined 
don history storage data 630 in the transaction history beforehand, and a match is found, the data is interpretable. 
storage area 35 comprises ID of an opposite of ^ When no match is found, the data is uninterpretable. The 
communication, "object" data indicating money or a ticket public key FTk retained by the electronic ticket storage 
'•sent/received" data indicating whether an object is sent or device 2 is used only for decrypting encrypted ticket infor- 
received, "content" data indicating the amount of money or mation data by the electronic ticket storage device 2 when 
the content of a ticket and "deletable flag* data indicating the content of an electronic ticket is confirmed by the 
whether the transaction history can be deleted ox not 30 terminal device 3 having no encryption mechanism. In this 
Next, the electronic ticket vending and refunding device einbodiment the electronic ticket vending and refunding 
1 produces ticket information data 610 comprising a ticket device 1 encrypts the whole or apart of the ticket informa- 
puWication source, an event name, a day and time, a place tion data 610 using the secret key ST1 (fc=l in this 
name, a seat number, and a serial number (Step 370) and emolument) and produces an electronic signature, 
updates the ticket information file 16 (Step 380). FIG. 9 33 Next in the same communication procedure as that of 
shows a configuration example of the ticket information data sending of electronic money, the communication content is 
610 registered in the ticket information file 16. encrypted and the electronic ticket is sent to the electronic 
It is necessary that a ticket publisher signs the ticket ticket storage device 2 (Step 390). In this case, the secret key 
information data 610 electronically for prevention of forg- and public key to be used for encryption may be or may not 
ery. As a method for electronic signature, an asymmetrical 40 be the same as those used for electronic money. In this 
encryption algorithm is used. Each ticket publisher retains a cmbc<limcnt. the global secret key for the electronic ticket 
secret key STk which varies with a ticket publisher and a storage devices 2 is STg. and the global public key is PTg. 
public key FTk exxrespooding to it For electronic signature. and the local secret key STli which varies with each 
the whole or a part of the ticket information data 610 is electronic ticket storage device 2 is STli and the local 
encrypted by the secret key STk beforehand. To produce an 45 public key is PTli and each ticket storage device 2 retains 
electronic signature using a part of toe ticket information STli. PT1L PTg, and FTli*STg. The host computer of the 
data 610. it is desirable to acquire a part of the original data ticket publisher, mat is, the electronic ticket vending and 
using the hash function and then encrypt STk. In the refunding device 1 retains STli. PTli FTg. FTli*STg. and 
electronic ticket storage area 32 of the electronic ticket STL The global secret key STg is managed under strict 
storage device 2. the ticket information data 610 and the 50 management of a generalizing manager of the electronic 
electronic signature are stored. The constmxtion of ticket ticket system. A ge neraliz i ng system manager is a manager 
storage data 620 in the electronic ticket storage area 32 is of the ticket vending and refunding network system and a 
shown in FIG. 10. Hie ticket storage data 620 comprises a supplier of an IC card (electroiux ticket storage devfce 2) ai^ 
ticket number, an unencrypted ticket information data 610, software for toe host computer (electronic ticket vending 
an dectronic signature, and an invalid flag. As an alternative 55 and refunding device 1) and the manager manages the global 
idea, like ticket storage data 640 having me constitution secret key of the encryption algorithm which is used by a 
shown in FIG. 11. it is possible to store data which is user of the network for c ommunicatio n. A ticket vender 
obtained by encrypting the whole of the ticket information receives the ticket vending and refunding software for host 
data 610 by the secret key STk and a public key FTk which computer from toe network system manager and a ticket 
forms a counterpart to the secret key STk in the electronic 60 purchaser receives an IC card from the network system 
ticket storage area 32. manager. When toe electronic ticket key is the same as toe 
Hereinafter, in the case of me ticket data shown in FIG. electronic money key. it is desirable to set CTg=Sg.FTg=Pg. 
10 a corobinatkm of the ticket information data 610 and an STli=Sli and FTli=PlL In the electronic ticket vending and 
dectronic signature is called an electronic ticket and in the refunding device 1 in mis embodiment t=l and in toe 
case of toe ticket data shown in FIG. It toe ticket infor- 65 electronic ticket storage device 2. 1-2. 
mation data 610 which is encrypted entirely and signed The communication procedure between toe electronic 
dectronically is called an electronic ticket ticket storage device 2 and toe dectronic ticket vending and 
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refunding device 1 will be explained hereunder for the two device 3 (Step 476). and the terminal device 3 displays it on 

cases which are divided depending on the form of an the display device 23 (screen 586) (Step 486). and then the 

electronic ticket. communication is completed (Step 490). 

(a) When an electronic ticket comprises unencrypted (b) When an electronic ticket comprises only data in 

ticket information data and an electronic signature, 5 which the whole of the ticket information data is 

The electronic ticket vending and refunding device 1 encrypted and signed electronically 

sends anelectronic ticket reception preparation command to In the same way as with the data constitution in (a), the 

^^^Tv^ • 1* ^ U £?^^™ electronic ticket vending and refunding device 1 sends an 

dectrotux ticket storage device 2 sends ™2*CT^ST12 elcctronic ticto preparatioTcimmand to the elec- 

t ZS* 0010 *^ ***** ^f.™ *f tel 2?° n ^ c 10 tronic ticket storag^c72lnd upon receipt ofltfte 

4. In this case, the message R includes transaction . . ^. ~f , . ^ ^ "V * 

identification, transaction sequence number, and ticket data. ^ZJ??***^™? 2 *"* CDC W tcd of 
The electronic ticket vending and refunding device 1 FT12*CTg+R*ST12 to the electronic ticket vending and 
acquires the local public key PT12 using the retained global refunding device 1 via me telephone line 4. The electronic 
public key PTg and acquires the message R using the public tkket VCDdin 8 and refunding device 1 acquires the message 
key FT12. The electronic ticket vending and refunding 15 * rom me aforementioned encrypted data and then pro- 
device 1 produces a rnessage VTtiiicludlngRfr^ <lucts a message VR including R from the electronic ticket 
information data, the electronic signature, and the message which is produced by encrypting the whole of the ticket 
R and then sends encrypted data of FTll*STgf VR*ST11 to information data by the secret key ST1, the message R. and 
the terminal device 3. The terminal device 3 which receives the public key FT1 which forms a counterpart to the secret 
it via the telephone line transfers FTll*STg+VR*STH to 20 key ST1 and sends encrypted data of FTll»STgf VR^FTll 
the electronic ticket storage device 2 via the IC card R/W 24. to the electronic ticket storage device 2 (Step 390). When the 
The electronic ticket storage device 2 acquires the encrypted electronic storage device 2 receives the encrypted data (Step 
data of FTU*STg+VR*CTll via me external I/O interface 416) via the terminal device 3 (Step 406). the CPU 38 
37 and the microprocessor 38 decrypts the acquired acquires the message VR from the encrypted data in the 
encrypted data by the following procedure. 25 same procedure as that in (a), acquires the message R. the 

Rrstly. the microprocessor 38 acquires the local public electronic ticket encrypted by the secret key STL and the 

key FT11 using the global public key PTg and acquires the electronic signature from this acquired message VR, checks 

message VR using me local public key PR1L The micropro- the validity of R by checking whether R which is sent from 

cesser 38 acquires the message R. the ticket information data the electronic ticket storage device 2 before is included or 

610* and the electronic signature from the message VR and 30 not, and then stores the acquired encrypted electronic ticket 

checks the validity of R by checking whether the message R data and the public key FTl in the electronic ticket storage 

which is sent from the electronic ticket storage device 2 area 32 as the ticket storage data 640 as shown in FIG. 11 

before is included or not, and then stores the ticket infer- (Step 426). In the same way as with the case in (a), the 

matton data 616 and the electronic signature in the electronic electronic ticket storage area 32 may store only one elec- 

ticket storage area 32. When the electronic ticket storage 35 tronic ticket or a plurality of electronic tickets, 

area 32 can store a plurality of electronic tickets, the When the storing process into the electronic ticket storage 

electronic ticket storage area 32 identifies the area storing area 32 is completed normally in the same way as with the 

the electronic tickets by the number thereof and stores the case in (a), the electronic ticket storage device 2 registers 

electronic tickets in the storage area of the number (1 in this **# 1 electronic ticket is received from professional baseball 

case). The electronic ticket storage area 32 may store only 40 A** in the transaction history storage area 35 (Step 430) and 

one electronic ticket and in this case, there is no need to then sends acknowledgment of reception to the electronic 

identify the dectronic ticket by the aforerncntioned number. ticket vending and refunding device 1 (Step 446). When the 

The next processing procedure of Step 390 mentioned electronic tufcet vending andretnnding advice 1 receives me 

above will be explained by referring to FIGS. 5 and 6 again. acknowledgment of reception via tirctenninal device 3 (Step 

When the dectronic ticket storage device 2 receives the 45 456), the electronic ticket vending and refunding device 1 

dectronic ticket (Step 410) via the tenninal device 3 (Step registers "two tickets (2-56, 2-57) off reserved seats A for 

406) and stores the electronic ticket in the electronic ticket June 2nd match (672) for transaction #345123 are published" 

storage area 32 (Step 426X the electronic ticket storage in the transaction history file 17 (Step 460). 

device 2 registers ~#1 dectronic ticket is received from The electronic ticket vending and refunding device 1 

professional baseball A** in the transaction history storage 50 sends a notification of service completion to the terminal 

area 35 (Step 436) and then notifies the electronic ticket device 3 (Step 470). and the terminal device 3 displays it on 

vending and refunding device 1 of acknowledgment of the display device 23 (screen 586) (Step 480). and then the 

reception of the dectronic ticket (Step 446X When there communication is completed (Step 496). 

exists only one electronic ticket storage area 32, it is possible As mentioned above, by using a telephone line, a ticket 

to register the area number where the electronic ticket is 55 purchaser can purchase a ticket without going to a ticket 

stored or not stall. Since data between devices is encrypted, even if data 

When the electronic ticket vending and refunding device flowing the telephone line is intercepted, the electronic 
1 receives the acknowledgment of reception (Step 466) via ticket will not be forged or Illegally reproduced, 
me te rminal device 3 (Step 456). the electronic ticket Furthermore, if the transaction history of an electronic ttrW* 
vending and refunding device 1 registers "two tickets (2-56, 60 and electronic money is stored, a trouble on transmission 
2-57) of reserved seats A for June 2nd match (672) for and reception of the dectronic money and electronic ticket 
transaction #345 123 are published^ in the transaction history can be prevented. In this embodiment by using a micro- 
file 17 as shown in the transaction history data 656 in FIG. processor (CPU) in which a program is set so mat an 
7. In this case, transaction #345123 may be a ticket publi- electronic ticket and electronic money are mounted in one 
cation serial number « device (IC chip) and the transaction history when the 

The dectronic ticket vending and refunding device 1 electronic ticket and electronic money are actually sent or 

sends a notification of service completion to the terminal received and the transaction history which is applicable only 
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after the electronic ticket is deleted are updated, the trans- 
action history can be prevented from alteration. 

(2) Case of refunding a purchased ticket 

FIG. 12 is a flow chart showing the outline of the 
processing procedure for refunding a purchased electronic 
ticket using the electronic ticket vending and refunding 
system shown in FIG. 1 and FIG. 13 is an illustration 
showing operation screen examples displayed on the display 
device 23 of the terminal device 3 for refunding an elec- 
tronic ticket. 

Firstly, a ticket purchaser calls out the electronic ticket 
vending and refunding device 1 of a ticket publisher or a 
ticket vender of the ticket to be refunded by using me 
terminal device 3 (Step 910), The electronic ticket vending 
and refunding device 1 sends the initial menu to the terminal 
device 3 via the telephone line 4 (Step 920) and the terminal 
device 3 displays an initial menu 1310 on the display device 
23. 

When the ticket purchaser inputs "2" equivalent to ticket 
refunding using the input device 22 according to the initial 
menu, the terminal device 3 sends "2" to the electro nic ticket 
vending and refunding device 1 via the telephone line 4 
(Step 939). The electronic ticket vending and refunding 
device 1 sends data corresponding to a screen 1320 to the 
terminal device 3 and the terminal device 3 displays the 
screen 1320 on the display device 23 and instructs the ticket 
purchaser to insert the IC card, that is. the electronic ticket 
storage device 2. 
When the ticket purchaser inserts the electronic ticket 
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cases which are divided depending on the form of an 
electronic ticket 

(a) When an electronic ticket comprises unencrypted 
ticket information data and an electronic signature 

In the same way as with the case of purchasing a ticket 
newly in (1) mentioned above, the electronic ticket storage 
device 2 retains the global public key FTg, the local secret 
key ST1Z the local public key FT12. and PT12*STg which 
is obtained by signing (encrypting) the local public key 
FT12 by the global secret key STg and the electronic ticket 
vending and refunding device 1 retains the global public key 
Pig. the local secret key STU, the local public key PT11, 
FTll+STg which is obtained by signing (encrypting) the 
local public key Fill by the global secret key STg. and the 
global secret key STg for electronic ticket 

Firstly, the electronic ticket vending and refunding device 
1 sends encrypted data of FTll*STg4R*STll to the elec- 
tronic ticket storage device 2 via the telephone line 4. In this 
case, the message R Includes transaction identification* 
transaction sequence number, and ticket data. The CPU 38 
of the electronic ticket storage device 2 acquires unen- 
crypted ticket information data and en electronic signature 
from the area of Bern No. 1 of the electronic ticket storage 
area 32. 

Next, the CPU 38 produces a message VR from the 
message R. the ticket information, and the electronic signa- 
ture and sends encrypted data of PT12*STg+VR*ST12 to 
the electronic ticket vending and refunding device 1 via the 
telephone line 4 (Step 1000). When there is an invalid flag 
in the electronic ticket storage area 32, the invalid flag is 



storage device 2in which the electronic ticket to be refunded 30 turned ON. The reason that the invalid flag is turned ON 
is stored, the terminal device 3 sends to the electronic ticket " ^ J ~*~ " A ~*~ "^"^ ** 

vending and refunding device 1 mat the electronic ticket 
storage device 2 is inserted. The electronic ticket vending 
and refunding device 1 sends a command to the terminal 
device 3 so as to read the ticket information data from the 
electronic ticket storage device 2 and display the ticket 
content on the display device 23 (Step 940). The terminal 
device 3 reads the ticket i nf ormation data from the electronic 
ticket storage device 2 (Steps 950. 960) and displays the 
ticket information data on the display device 23. The ter- 
minal device 3 may display a plurality of ticket information 
data at a time according to the size of the display device 23 
or may display one by one. Furthermore, in this case, the 
electronic ticket vending and refunc&ng device 1 may com- 
mand the HTT"fa*' device 3 so mat the terminal device 3 
sends read ticket information data to the electronic ticket 
vending and refunding device 1 one by one and the elec- 
tronic ticket vending and refunding device 1 displays it or 
may control so that the CPU 27 of the terminal device 3 
displays read data. 

A case that the CPU 27 displays all stored ticket infor- 
mation data on one screen win be explained hereunder. 

When tike terminal device 3 displays the ticket informa- 
tion stored in the electronic ticket storage device 2 as shown 
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without Acting the data is that the data which is stored 
originally is prevented from becoming indefinite due to a 
communication failure before the refunding is completed 
and at the same time, a status that the electronic ticket 
storage device 2 is forcibly pulled out immediately after the 
refunding is completed and both the valid ticket and the 
refund exist in the electronic ticket storage device 2 is 
prevented. 

When the electronic ticket vending and refunding device 
1 receives this encrypted data via the terminal device 3 
(Steps 1010, 1020). the electronic ticket vending and refund- 
ing device 1 acquires the unencrypted ticket information 
rf*ta the electronic signature, and the message R from the 
message VR. verifies the validity of the message R by 
mnfamlng whether R which is sent by the electronic ticket 
vending and refunding device 1 before is included, and then 
verifies the validity of the electronic signature (Step 1030). 
The validity of the electronic signature is verified by 
decrypting the electronic signature by die public key FT1 
retained by the electronic ticket vending and refunding 
device 1 and comparing u^e identity with the ticket infor- 
mation data. When the electronic signature is produced from 
a part of the ticket information data, it is desirable to extract 
a part of the ticket information data received by the same 



1330 and then the ticket parchaser inputs the 55 procedure (for example, the same hash function) as that for 

producing the electronic signature and compare It with the 
electronic signature which is decrypted before. 

When the confirmation of the validity is completed, the 
electronic ticket vending and refunding device 1 registers 
60 reception of the electronic ticket in the transaction history 
file (Step 1040). FIG. 14 shows transaction history data 1370 
which is an example of the content of the transaction history 
file 17 of the electronic ticket vending and refunding device 
1. When the electronic ticket is received, the ticket is 
65 refunded, so mat the deletable flag corresponding to the 
transaction history of the transaction number concerned in 
vending and refunding of the ticket is changed to ON. 



on a screen 

ticket number (1 in (his example) to be refunded from the 
ticket screen shown on the screen 1330. the terminal device 
3 sends "1" to the electronic ticket vending and refunding 
device 1 (Step 970). When the electronic ticket vending and 
refunding device 1 receives T, the electronic ticket vend- 
ing and refunding device 1 sends a sending request com- 
mand for the electronic ticket of Item No. 1 to the electronic 
ticket storage device 2 via the terminal device 3 (Steps 980. 
990> 

The communication procedure between the electronic 
ticket storage device 2 and the electronic ticket vending and 
refunding device 1 will be explained hereunder for the two 
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Thereafter, the electronic ticket vending and refunding device 3 (Step 1190). and the terminal device 3 displays it 

device 1 sends acknowledgment of reception of the elec- on the display device 23 (screen 1360) (Step 1200). and the 

tronic ticket to the electronic ticket storage device 2 (Step communication is completed (Step 1210). 

1050). When the electronic ticket storage device 2 receives (b) When an electronic ticket comprises only ticket infor- 

3 nation data which is wholly encrypted and electron!- 

(5tep lOoO). the electronic nctoet storage device 2 registers ca y y s ^ ne< j 

S™^^ 8 ^n^r" « ^ Firstly. thleiectronic ticket vending and refunding device 

storage area 35 (Step 1070). FIG. 15 shows transaction , -^A-—-^ A*t* m urii*er^j>*OT« *L 

history storage data 1380 which is an example of the content L^t^S^ 

of the transaction history storage area35of the electronic tnmc StOTagc ^ v ? cc 1 2 J ia mc tdc P hoDC . 1 J DC £ 10 
ticket storage device 2, 10 casc ' mc mcssa 8 c R includes transaction identification. 

When the registration is completed, the electronic ticket transaction sequence number, and ticket data. The CPU 38 

storage device 2 sends notification of completion to the of the electronic ticket storage device 2 acquires the ticket 

electronic ticket vending and refunding device 1 (Step information data which is wholly encrypted by the secret 

1080). When the electronic ticket storage device 2 receives S 11 fram me ma Iten » No. 1 of the electronic ticket 
the completion of registration via the terminal device (Step 15 storage area 32. 

1090). the electronic ticket storage device 2 updates the Next, the CPU 38 produces a message VR from the 

ticket information file 16. registers that the corresponding message R and the encrypted ticket information and sends 

ticket becomes revendible (Step 1100). subtracts the refund encrypted data of PT12*STg+VR*ST12 to the electronic 

from the electronic money storage area 12. and men sends ticket vending and refunding device 1 via the telephone line 
the electronic money equivalent to the refund to the elec- 20 4 (Step 1000). When there is an invalid flag in the electronic 

tronic ticket storage device 2 (Step 1110). ticket storage area 32. the invalid flag is turned ON. When 

When the refunding commission is required in this case. the electronic ticket vending and refunding device 1 receives 

the electronic ticket storage device 2 calculates the refund in it via the terminal device 3 (Steps 1010, 1020), the electronic 

consideration of the amount of money. When the electronic ticket vending and refunding device 1 acquires the encrypted 
ticket storage device 2 receives the electronic money (Step 25 ticket information data and the message R from the message 

1130) via the terminal device (Step 1120). the electronic VR, verifies the validity of the message R by confirming 

ticket storage device 2 accumulates the amount of electronic whether R which is sent by the electronic ticket vending and 

money in the electronic money storage area 33 (Step 1140). refunding device 1 before is included, and then verifies (he 

The electronic ticket storage device 2 registers reception of validity of the encrypted ticket information data (Step 1030). 
the electronic money in the transaction history storage 30 The validity of the encrypted ticket information data is 

device 35 (Step 1150). When there exists a dektable flag verified by decrypting the ticket information data which is 

area in the transaction history storage area 35, the deletable encrypted by the public key FIT retained by the electronic 

flag corresponding to the transaction history concerned in ticket vending and refunding device 1 and judging whether 

vending and purchasing of the refunded ticket is turned ON. the decrypted data can be interpreted or not 

Thereafter, the electronic ticket storage device 2 sends 33 Hereafter. Step 1040 to Step 1210 are the same as the 

acknowledgment of reception of the electronic ticket to steps in (a) When an electronic ticket comprises unencrypted 

(Step 1160). When the electronic ticket vending and refund- ticket information data and an electronic signature, so that 

ing device 1 receives the acknowledgment of reception from the explanation thereof will be omitted, 

the electronic ticket storage device 2 via the terminal device When there exists no invalid flag in the electronic ticket 
3 (Step 1170). the electronic ticket vending and refunding 40 storage area 32. another storage area (not shown in the 

device 1 registers completion of refunding in the transaction drawing) for storing ticket information data to be sent is 

history file 17 (Step 1180)iWhen mere exists a dektable flag installed, and the ticket information data to be sent is copied 

area, the dektable flag corresponding to the transaction in this storage area, and the corresponding ticket information 

history concerned in vending and purchasing of the refonded data existing in the electronic ticket storage area is deleted, 

ticket is turned ON. 45 and then the copied ticket infannation data is sent, and when 

Therefore, differences between the example of the trans- ticket information data having no electronic signature is to 
action history data 1370 of the electronic ticket vending and be sent it is not copied in the aforemcntioDed another 
refunding device 1 shown in FIG. 14 and the example of the storage area so that an occurrence of a status that there exist 
transaction history data 650 shown in FIG. 7 are the respect a plurality of tickets at the time of communication can 
that the del ctaMe flag of the transaction history of the 50 prevented and the evidence can be perpetuated, 
transaction number of the ticket and money to be refunded (3) Case of confirming the content of a purchased dec- 
is changed to ON and the respect th^ tronic ticket 

of me transaction number receiving the corresponding A case that the content of an electronic ticket stored in the 

refunded ticket and the transaction history of the transaction electronic ticket storage device 2 is confirmed by the ter- 

iiumber refunding the corresponding money are added. 53 rninal device 3 shown in FIG. 3 cr a portable terminal device 

Differences between the example of the transaction history 1400 having the constitution shown in FIG. 16 will be 

storage data 1300 of the electronic ticket storage device 2 explained hereunder, In this case, the terminal device 1400 

shown in FIG. 15 and the example of the transaction history is used for explanation. However, needless to say. the 

storage data 630 shown in FIG. 8 arc the respect that the terminal device 3 or a similar device including the consti- 

ddetable flags of the cc*respc*ding money of the ID of the 60 tution elements of the terminal device 1400 may be used, 

corresponding opposite of coinmumcation and the ticket The portable terminal device 1400 comprises, as shown in 

transaction history are changed to ON respectively and the FIG. 16. an input device 1410 for inputting data, a display 

respect that the transaction history returning the correspond- device 1420 for displaying d ata, an IC cjrd R/W 1430 for 

ing ticket and the transaction history receiving the corrc- commum rating with the dectronic ticket storage device 2 

sponding money are added. 65 comprising an IC card, a storage device 1440. and a CPU 

Finally, the electronic ticket vending and refunding device 14S0 for controlling the aforementioned devices 1410 to 

1 sends a notification of service completion to the terminal 1440. 
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The communication procedure between the electronic 
ticket storage device 2 and die electronic ticket vending and 
refunding device 1 will be briefly explained hereunder for 
the two cases which are divided depending on the form of an 
electronic ticket by referring to the screen examples shown 
in FIG. 17. 

(a) When an electronic ticket comprises unencrypted 

ticket information data and an electronic signature 
When the power switch of the terminal device 1400 is 



decrypting encrypted ticket information data from the elec- 
tronic ticket storage area 32. decrypts the electronic ticket 
using the acquired public key PT11. and then sends the data 
to (he terminal device 14#f. 

As mentioned above* for the ticket information data 
acquisition command, the electronic ticket storage device 2 
sends unencrypted ticket information data to the terminal 
device 14M. so that the encryption/decryption means is not 
necessary for the terminal device 1400. As a result even a 
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turned on, a screen 1510 is displayed on the display device io general portable terminal device can confirm the content of 
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1420. When a ticket purchaser inserts the electronic ticket 
storage device 2 into the IC card R/W 1430 of the terminal 
device 1410 and then selects "acknowledgment of electronic 
ticket content" by inputting "1" equivalent to "ticket content 
displayed" using the input device 1410. the terminal device 
1400 sends a command for acquiring ticket information data 
to the electronic ticket storage device 2 via the IC card R/W 
143a The electronic ticket storage device 2 receives the 
command from the external I/O interface 37 and the CPU 38 
acquires the ticket information data from the electronic 
ticket storage area 32 according to the command and sends 
the ticket information data to the terminal device 1400 via 
the external I/O interface 37. The terminal device 1400 
displays the received ticket information data on the display 
device 1420. for example, as shown on a screen 1520. 

When a plurality of electronic tickets are stored in the 
electronic ticket storage device 2. the terminal device 1400 
may display the contents of all the electronic tickets accord- 
ing to me size of the display device 1420 or may display one 
by one. When the number at which an electronic ticket is 
stored is designated so as to send a ticket information data 
acquisition command, the control operation of the CPU 38 
of the electronic ticket storage device 2 may be programmed 
so as to send only the electronic ticket data corresponding to 
the designated number to the terminal device 1400 ox to send 
the ticket information data of all the electronic tickets to the 
terminal device 1400 when no specific number is desig- 
nated. 

If ^acknowledgment of money balance** is selected by 
inputting **2" equivalent to "money balance displayed* using 40 
the screen input device 1410 when the screen 1510 is 
displayed on the display device 1420. in the same way as 
with "ticket content displayed", the terminal device 1400 
sends a command for the electronic money bal- 

ance data of the electronic money storage area 33 to the 
electronic ticket storage device 2 via the IC card R/W 1430. 
The terminal device 1400 displays the received electronic 
money balance data on the display device 1420. for 
example; as shown on a screen 1530. 

Or. if "acknowledgment of transaction history" is selected so 
by inputting "3" equivalent to "transaction history dis- 
played 0 ' using the screen input device 1410 when the screen 
1510 is displayed on the display device 1420. in the same 
way as with "ticket content displayed", the terminal device 
1400 sends a command for »™piirfng the transaction history 
storage data of the transaction history storage area 35 to the 
electronic ticket storage device 2 via the IC card R/W 1430. 
The terminal device 1400 displays the received transaction 
history storage data on the display device 1420, for example, 
as shown on a screen 1540. 
(b) When an electronic ticket comprises only ticket infor- 
mation data which is wholly encrypted and electroni- 
cally signed 

A difference from the case of (a) mentioned above is that 
the CPU 38 of the electronic ticket storage device 2 acquires 
data in which the whole of an electronic ticket, that is. ticket 
information data is encrypted and the public key PT11 for 
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a ticket briefly and the security can be ensured at the same 
time because the encryption method is not known by a third 
person. F urth ermore, the validity as an electronic ticket 
cannot be proved only by unencrypted ticket information 
data, that is. ticket information data which is not signed 
electronically, so that there is an advantage that the elec- 
tronic ticket cannot be forged only by reproducing the ticket 
information data. 

The suitable embodiments of the present invention have 
been explained above. However, needless to say. the present 
invention is not limited to the aforementioned embodiments 
and within a range which is not deviated from the concept 
of the present invention, the design can be changed vari- 
ously. 

As the aforementioned embodiments show, according to 
the present invention, since a ticket can be purchased or 
refunded using a communication means such as a telephone 
line, a ticket purchaser can purchase or refund a ticket at 
home without going to a ticket vending counter. 

Since different ticket publishers can share a single elec- 
tronic ticket system safely, a publisher can store different 
electronic tickets in one electronic ticket storage device. 

Furthermore, by storing both electronic money and an 
electronic ticket in a single electronic ticket storage device 
and controlling sending and reception thereof and the send- 
ing and reception history thereof by the microprocessor of 
the electronic ticket storage device, a transaction history 
having a high evidence ability which cannot be alterated 
easily can be realized. 

Furthermore, it is possible to prevent a ticket purchaser 
from retaining both a valid ticket and a refund at the same 
tjm* and when the ticket purchaser cannot receive the 
refund* it can be proved that he retains the ticket 
The invention claimed is: 

1. An electronic ticket vending system comprising: 
dectronic ticket vending means for generating an elec- 
tronic ticket and executing at least one of vending and 
refunding by exchanging the generated electronic ticket 
with electronic money; 
a communication line connected to said vending means; 
at least one terminal iwtt* connected to said com muni- 
cation line for «~« siting input, output, transmission 
and reception for executing at least one of vending and 
refunding of an electronic ticket; and 
electronic ticket storage means having means for elec- 
tronically connecting said terminal means for storing 
electronic money, means for storing an electronic 
ticket and means for storing a transaction history 
including transactions of dectronic money and elec- 
tronic tickets, updated by a program stored in said 
electronic ticket storage means, at a transaction of at 
least one of electronic money and an electronic ticket; 
wherein by a request of one of purchasing and refunding 
of an electronic ticket by at least one of said terminal 
means and said electronic ticket storage means, at least 
one of said electronic ticket and said dectronic money 
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is sent from said electronic ticket vending means via 
said communication line. 

2. An electronic ticket vending system according to claim 
1. wherein said electronic ticket vending means comprises: 

ticket production means for producing a ticket; 

ticket transmission and reception means for transmitting 
or receiving an electronic ticket; 

money transmission and reception means for transmitting 
or receiving electronic money; 

money storage means for storing electronic money; 

transaction history storage means for storing a history, 
hereinafter referred to as a transaction history, of trans- 
mitting or receiving at least one of electronic money 
and an electronic ticket; and 

encryption key storage means for staring an encryption 
key. 

3. An electronic ticket vending system according to claim 
X wherein said ticket production means comprises: 

a imcrocomputer which has a ptogi am for producing an 
electronic ticket from at least data indicating a ticket 
publication source and data indicating the price of a 
ticket 

4. An electronic ticket vending system according to claim 
X wherein said electronic ticket vending means further 
comprises: 

means for storing a secret key of an asymmetric encryp- 
tion algorithm which varies with each ticket publisher 
and a public key forming a counterpart to said secret 
key. 

5. An electronic ticket vending system according to claim 
1, wherein said electronic ticket storage means further 
comprises: 

an VO interface as said means for electronically connect- 
ing said terminal means; and 

a microprocessor for controlling transmission and recep- 
tion of an electronic ticket and electronic money, and 
storage of said transaction history. 

6. An electronic ticket vending system according to claim 40 
5. wherein said electronic ticket storace rocanft further 
composing: 

means for storing unencrypted ticket data; and 
means for storing an electronic signature which is pro- 
duced by encrypting the whole or apart of said ticket 
data by said secret key of the asymmetric algorithm; 
wherein said microprocessor is set so as to return said 
unencrypted ticket information to a first command 
obtained via said VO interface with the outside for 
reading said unencrypted ticket data as a response to 
said first command, check the validity of a second 
command for reading data having said electronic sig- 
nature for said second command, and return said ticket 
information and said electronic signature as a response 
to said second command when said rmcroprocessor 
judges that said second command is valid. 

7. An electronic ticket vending system according to daim 
5, wherein said electronic ticket storage means comprising: 

means for storing ticket information which is encrypted 
by a secret key of an asyrnmetric encryption algorithm; 
and 



means for staring a public key which forms a counterpart 
to said secret key which encrypts said ticket 
information, 

wherein said microprocessor has a program for returning 
the result obtained by decrypting said encrypted ticket 



information by said public key, in response to a first 
command obtained via said VO interface, checking the 
validity of a second command of reading data having 
said electronic signature for said second command, and 
returning said encrypted ticket information in response 
to said second command when said rmcroprocessor 
judges that said second command is valid 

8. An electronic ticket vending system according to claim 
6. wherein said niicroprocessor has a program for returning 
a response to the dectronic signature which is sent together 
with said second command obtained via said VO interface 
on whether there exists an electronic signature conforming 
to said dectronic signature in said dectronic ticket storage 
means. 

9. An electronic ticket vending system according to claim 
5. wherein said microprocessor has a program far protecting 
an item rdating to said electronic ticket, until said dectronic 
ticket stored in said dectronic ticket storage means is 
deleted 

10. An dectronic ticket vending system according to 
20 claim 5, wherein said microprocessor has a program for 

storing electronic money in said dectronic money storage 
means in refunding of the ticket and for deleting the dec- 
tronic ticket to be refunded after the storage, said dectronic 
ticket being stored in an electronic ticket storage area of said 
dectronic ticket storage means. 

11. An electronic ticket vending system according to 
claim 5. wherein said dectronic ticket storage means further 
has an area for staring an invalid flag and said micropro- 
cessor comprising: 

mean for making said invalid flag corresponding to said 
dectronic ticket to be refunded valid for refunding of 
the ticket and then transferring said electronic ticket to 
said electronic ticket vending means; and 
means for deleting said dectronic ticket stored in said 
electronic ticket storage area of said dectronic ticket 
storage means after completion of transfer. 

12. An dectronic ticket vending method in a system 
comprising dectronic ticket transmission and reception 
means, at least one terminal means, and a communication 
line connecting said electronic ticket transmission and 
reception means and said at least one trmtnai means, said 
method comprising: 

a step of sending a purchased electronic ticket to said 
electronic ticket transmission and reception means 
from at least one of the terminals connected to an 
electronic ticket storage means having means for elec- 
tronically connecting to said terminal means, said elec- 
tronic ticket storage means further having means for 
storing electronic money, an dectronic ticket and a 
transmission history including transactions of elec- 
tronic money and e l ectr on ic tickets, updated by a 
program stored in said electronic ticket storage means, 
at a transaction of at least one of electronic money and 
an electronic ticket; 
a step of sending a sending request for the purchasing cost 
to the purchase desire terminal, when said electronic 
ticket can be vended from said dectronic ticket trans- 
mission and reception means; 
a step of sending the dectronic money of said purchase 
cost to said electronic ticket transmission and reception 
means from said purchase desired terminal via said 
communication line; 
a step of sending said purchase desired dectronic ticket to 
65 said purchase desired terminal from said electronic 
ticket transmission and reception means after said 
electronic money is recdved; and 
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a step of receiving said sent electronic ticket oo said 
terminal and storing it in said electronic ticket storage 
means connected to said terminal. 

13. An electronic ticket vending method according to 
claim 12, wherein when said purchased electronic ticket is s 
to be refunded, said method further comprising: 

a step of sending a refunding request to said electronic 
ticket transmission and reception means from said 
terminal via said communication lines; 

a step of requesting sending of electronic ticket to be 10 
refunded, to the electronic ticket storage means con- 
nected to said terminal; 

a step of receiving said electronic ticket sent from said 
electronic ticket storage means via said communication 15 
line, and then confirming the validity of said electronic 
ticket to be refunded; 

a step of sending electronic money of said ticket to be 
refunded to said terminal via said communication line 
when said electronic ticket transmission and reception 20 
means judges that said electronic ticket to be refunded 
is valid as a result of the confirmation stated In the 
receiving step; and 

a step of transferring said electronic money to said 
electronic ticket storage means from said terminal 25 
receiving said electronic money. 

14. An electronic ticket refunding method in a system 
comprising electronic ticket transmission and reception 
means, at least one terminal means, and a communication 
line connecting said electronic ticket transmission and 30 
reception means, said method comprising: 

a step of sending an electronic ticket refunding request to 
said electronic ticket transmission and reception means 
from at least one of the terminals connected to an 
electronic ticket storage means having means for dec- ^ 
txonically connecting to said terminal means, said elec- 
tronic ticket storage means further having means for 
storing electronic money, an electronic ticket, and a 
transmission history including transactions of elec- 
tronic money and electronic tickets, updated by a 40 
program stored in said electronic ticket storage means, 
at a transaction of at least one of electronic money and 
an electronic ticket; 

a step of requesting sending of said electronic ticket 
requ ested to be returned to the electronic ticket storage 45 
means connected to said terminal from said electronic 
ticket transmission and reception means; 

a step of receiving said electronic ticket from said elec- 
tronic ticket storage means via said communication line x 
and then confirming the validity of the received elec- 
tronic ticket by said electronic ticket transmission and 
reception means; 

a step of sending electronic money of the ticket to be 
refunded to said via said communication line 

when said electronic ticket transmission and reception 
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means judges that said electronic ticket is valid as a 
result of said confirmation stated in the receiving step; 
and 

a step of transferring said electronic money to said 
electronic ticket storage means from said tenninal 
receiving said dectronic money. 

15. An dectronic ticket vending method according to 
claim 12. further comprising: 

a step of recdving said dectronic money from said 
electronic ticket storage means by said dectronic trans- 
mission and reception means; 

a step of storing that said dectronic money is received 
from said electronic ticket storage means; 

a step of sending said dectronic ticket to said dectronic 
ticket storage means; and 

a step of storing that said dectronic ticket is sent to said 
electronic ticket storage means. 

16. An dectronic ticket vending method according to 
claim 13. further comprising: 

a step of receiving said electronic ticket to be refunded, 
from said dectronic ticket storage means by said dec- 
tronic ticket transmission and reception means; 

a step of storing said dectronic ticket to be refunded is 
received from said electronic ticket storage means; 

a step of sending said electronic money to said electronic 
ticket storage means; and 

a step of storing said electronic money is sent to said 
electronic ticket storage means. 

17. An electronic ticket vending method according to 
claim 1Z further comprising: 

a step of sending said electronic money to said electronic 
ticket transmission and reception means from said 
terminal; 

a step of storing said electronic money is sent to said 
electronic ticket transmission and reception means; 

a step of recdving said electronic ticket by said terminal; 
and 

a step of storing said tenninal recdves said electronic 
ticket 

18. An dectronic ticket vending method according to 
claim 13, further comprising: 

a step of sending said electronic ticket to be refunded to 
said electronic ticket transmission and reception means 
from said electronic ticket storage means; 
a step of storing said dectronic ticket to be refunded is 
sent; 

a step of receiving said electronic money from said 
electronic ticket transmission and reception means by 
said electronic ticket storage means; and 
a step of storing said dectronic ticket storage means 
receives said electronic money. 

***** 
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